General

  • Target

    567600befa4e38aae3247bb705a5559fe8f753362a0dda8635c788cfaf339db3

  • Size

    170KB

  • Sample

    210615-llygvvp54n

  • MD5

    4969483f0334e0476ef19635313a9565

  • SHA1

    5a81c374b002e41bfaa59248d08ed3e4cbbfc36d

  • SHA256

    567600befa4e38aae3247bb705a5559fe8f753362a0dda8635c788cfaf339db3

  • SHA512

    0d2b82d2a09aeaa5aa9557186daf1d26798530f11668bd6082f421c92e5269ce2bcd92641c820765e0b23cc7e5f17eb98cb85d314fc618823b76795d4b1dd1b2

Malware Config

Extracted

Family

dridex

Botnet

40112

C2

128.199.200.38:443

192.163.233.216:6601

43.229.206.244:4125

rc4.plain
rc4.plain

Targets

    • Target

      567600befa4e38aae3247bb705a5559fe8f753362a0dda8635c788cfaf339db3

    • Size

      170KB

    • MD5

      4969483f0334e0476ef19635313a9565

    • SHA1

      5a81c374b002e41bfaa59248d08ed3e4cbbfc36d

    • SHA256

      567600befa4e38aae3247bb705a5559fe8f753362a0dda8635c788cfaf339db3

    • SHA512

      0d2b82d2a09aeaa5aa9557186daf1d26798530f11668bd6082f421c92e5269ce2bcd92641c820765e0b23cc7e5f17eb98cb85d314fc618823b76795d4b1dd1b2

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Matrix

Tasks